Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Removing Right Media virus


  • Please log in to reply
2 replies to this topic

#1 KRiddle

KRiddle

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:05 PM

Posted 21 December 2012 - 02:46 PM

Spybot detects and removes Right Media only to have it come back over and over again on my Dell laptop running Windows 7 Home Premium. Have been running Malware Bytes, SuperAntispyware and spybot to try to clean up the computer...

I do not consider myself to be more than moderately tech savvy, so talk slowly and use small words. Thanks in advance for the assistance.

Edited by KRiddle, 21 December 2012 - 03:06 PM.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,404 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:05 PM

Posted 21 December 2012 - 03:06 PM

Hello, there is probablya trtackiong cookie that is staying behind. Run SAS it should find ad.yeildmanager.

Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
    For instructions with screenshots, please refer to the How to use SUPERAntiSpyware to scan and remove malware from your computer Guide.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all other options as they are set):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the Control Center screen.
  • Back on the main screen, under "Select Scan Type" check the box for Complete Scan.
  • If your computer is badly infected, be sure to check the box next to Enable Rescue Scan (Highly Infected Systems ONLY).
  • Click the Scan your computer... button.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the scan log after reboot, launch SUPERAntiSpyware again.
  • Click the View Scan Logs button at the bottom.
  • This will open the Scanner Logs Window.
  • Click on the log to highlight it and then click on View Selected Log to open it.
  • Copy and paste the scan log results in your next reply.
-- Some types of malware will disable security tools. If SUPERAntiSpyware will not install, please refer to these instructions for using the SUPERAntiSpyware Installer. If SUPERAntiSpyware is already installed but will not run, then follow the instructions for using RUNSAS.EXE to launch the program.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 KRiddle

KRiddle
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:05 PM

Posted 21 December 2012 - 06:43 PM

Thanks for the speedy reply. Already had SAS installed, so followed instructions as you gave them (I think) and ran SAS. Just logging on to post this was a battle, so I know there's more yet to do...


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/21/2012 at 06:25 PM

Application Version : 5.6.1014

Core Rules Database Version : 9778
Trace Rules Database Version: 7590

Scan type : Complete Scan
Total Scan Time : 03:05:14

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator

Memory items scanned : 691
Memory threats detected : 0
Registry items scanned : 74231
Registry threats detected : 0
File items scanned : 105219
File threats detected : 218

Adware.Tracking Cookie
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\NYPK4PN5.txt [ /invitemedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\YO9WWSJA.txt [ /friendfinder.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\27A03C32.txt [ /ads.p161.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\67FJ6EJU.txt [ /www.porntube.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\WMHDO972.txt [ /ads.pubmatic.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\DX7CLRNW.txt [ /realmedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\T1B09H3V.txt [ /gayfriendfinder.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\5BM8H6ED.txt [ /adjuggler.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\GJE7FIAY.txt [ /specificclick.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\QOYL6957.txt [ /serving-sys.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\ST12TEJ4.txt [ /legolas-media.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\T09KN1A8.txt [ /ad.yieldmanager.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\ZRJYPN6C.txt [ /a.intentmedia.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\93AC1YKZ.txt [ /tubexxxvid.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\R7RT2GUS.txt [ /citygridmedia.d1.sc.omtrdc.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\2BJ7XY3S.txt [ /intermundomedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\KMPB0H3Z.txt [ /at.atwola.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\E449N91L.txt [ /revsci.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\1FMOP039.txt [ /ads.pointroll.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\UFPLNUJH.txt [ /ads.pornerbros.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\W2Z13NW2.txt [ /pro-market.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\4CXI3EFH.txt [ /imrworldwide.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\S1ZFXGJA.txt [ /h2porn.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\2HPBR2O4.txt [ /ox-d.matchflowmedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\0LD9BJ8J.txt [ /tacoda.at.atwola.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\IKMNFZ6V.txt [ /questionmarket.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\1T3ZPFS0.txt [ /adform.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\BIUH42UU.txt [ /technoratimedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\Q6D3THID.txt [ /tribalfusion.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\K09GV3G1.txt [ /ads.creative-serving.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\IYD64IEK.txt [ /h2porn.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\GREGKRDG.txt [ /click.livesearchnow.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\XS46AORJ.txt [ /h2porn.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\E8K8YSYS.txt [ /adlegend.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\YFEHZCBW.txt [ /network.realmedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\1E63BPMH.txt [ /2o7.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\KVAZNFR1.txt [ /ads.us.e-planning.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\TB7LCJI8.txt [ /3271.765973.filter.trafficengine.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\8C36AI9I.txt [ /banners.adcontrol.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\6QCV9JTF.txt [ /rotator.adjuggler.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\GZQEUEJT.txt [ /adxpansion.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\P9CFSK7Y.txt [ /findology.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\G51J23YB.txt [ /pointroll.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\41HXQC2L.txt [ /yieldmanager.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\DUK0TGGI.txt [ /ads.crakmedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\CGD83MI4.txt [ /a1.interclick.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\P65IP0ER.txt [ /lucidmedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\BL1CORI4.txt [ /www.porntube.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\ACP303XW.txt [ /ox-d.mediarefined.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\XE26OYAH.txt [ /media6degrees.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\WIAAAH72.txt [ /ads2.zeusclicks.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\1UEYWBH2.txt [ /h2porn.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\2BHLQAD8.txt [ /h2porn.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\6NDNPVTZ.txt [ /insightexpressai.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\C1YSXUZ3.txt [ /ads.undertone.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\DENNZBLW.txt [ /smartadserver.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\5PGJJCPL.txt [ /track.adform.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\ZM64UOHV.txt [ /bs.serving-sys.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\N344F1EO.txt [ /ad.360yield.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\9GTW9OS3.txt [ /www.burstbeacon.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\N7FMGD31.txt [ /ads.corecpm.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\WF1PV61R.txt [ /ees.rotator.hadj1.adjuggler.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\71576RLK.txt [ /www.porntube.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\U7Y0U6YJ.txt [ /ad.mlnadvertising.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\IQE8D62B.txt [ /trafficengine.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\16U2MQFE.txt [ /mediaservices-d.openxenterprise.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\ZSWF80FG.txt [ /ads.eqads.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\NPNG4733.txt [ /porntube.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\TREJA76O.txt [ /interclick.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\0WZJKBZ5.txt [ /78582.n23951.19477.yunofindit.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\TK7UQYXX.txt [ /adxpose.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\EU71VOGM.txt [ /www.porntube.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\9TAI5NPV.txt [ /adtechus.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\DKHFTIEV.txt [ /h2porn.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\4LB1JUNI.txt [ /filter.precisionmediappc.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\WOJH0M57.txt [ /collective-media.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\2IDD2JXT.txt [ /adtech.de ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\PP1RC2K3.txt [ /dc.tremormedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\XBFRNJSC.txt [ /1sadx.net ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\395AB3A5.txt [ /steelhousemedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\HT973ZXG.txt [ /www.porntube.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\8V18SGXN.txt [ /lfstmedia.com ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\FP1OH46B.txt [ /ads.videohub.tv ]
C:\Users\Jen and Keith\AppData\Roaming\Microsoft\Windows\Cookies\29ATJI2I.txt [ /ru4.com ]
C:\USERS\JEN AND KEITH\AppData\Roaming\Microsoft\Windows\Cookies\MUZVEFDA.txt [ Cookie:jen and keith@adsonar.com/adserving ]
C:\USERS\JEN AND KEITH\AppData\Roaming\Microsoft\Windows\Cookies\K2JE3KPW.txt [ Cookie:jen and keith@scarletseek.com/click/ ]
C:\USERS\JEN AND KEITH\AppData\Roaming\Microsoft\Windows\Cookies\IT23PR4R.txt [ Cookie:jen and keith@perfectsearchengines.com/click/ ]
C:\USERS\JEN AND KEITH\Cookies\YO9WWSJA.txt [ Cookie:jen and keith@friendfinder.com/ ]
C:\USERS\JEN AND KEITH\Cookies\67FJ6EJU.txt [ Cookie:jen and keith@www.porntube.com/ ]
C:\USERS\JEN AND KEITH\Cookies\DX7CLRNW.txt [ Cookie:jen and keith@realmedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\T1B09H3V.txt [ Cookie:jen and keith@gayfriendfinder.com/ ]
C:\USERS\JEN AND KEITH\Cookies\5BM8H6ED.txt [ Cookie:jen and keith@adjuggler.com/ ]
C:\USERS\JEN AND KEITH\Cookies\GJE7FIAY.txt [ Cookie:jen and keith@specificclick.net/ ]
C:\USERS\JEN AND KEITH\Cookies\QOYL6957.txt [ Cookie:jen and keith@serving-sys.com/ ]
C:\USERS\JEN AND KEITH\Cookies\T09KN1A8.txt [ Cookie:jen and keith@ad.yieldmanager.com/ ]
C:\USERS\JEN AND KEITH\Cookies\ZRJYPN6C.txt [ Cookie:jen and keith@a.intentmedia.net/ ]
C:\USERS\JEN AND KEITH\Cookies\R7RT2GUS.txt [ Cookie:jen and keith@citygridmedia.d1.sc.omtrdc.net/ ]
C:\USERS\JEN AND KEITH\Cookies\KMPB0H3Z.txt [ Cookie:jen and keith@at.atwola.com/ ]
C:\USERS\JEN AND KEITH\Cookies\1FMOP039.txt [ Cookie:jen and keith@ads.pointroll.com/ ]
C:\USERS\JEN AND KEITH\Cookies\UFPLNUJH.txt [ Cookie:jen and keith@ads.pornerbros.com/ ]
C:\USERS\JEN AND KEITH\Cookies\W2Z13NW2.txt [ Cookie:jen and keith@pro-market.net/ ]
C:\USERS\JEN AND KEITH\Cookies\4CXI3EFH.txt [ Cookie:jen and keith@imrworldwide.com/cgi-bin ]
C:\USERS\JEN AND KEITH\Cookies\S1ZFXGJA.txt [ Cookie:jen and keith@h2porn.com/channels/gay-gaping/ ]
C:\USERS\JEN AND KEITH\Cookies\2HPBR2O4.txt [ Cookie:jen and keith@ox-d.matchflowmedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\0LD9BJ8J.txt [ Cookie:jen and keith@tacoda.at.atwola.com/ ]
C:\USERS\JEN AND KEITH\Cookies\IKMNFZ6V.txt [ Cookie:jen and keith@questionmarket.com/ ]
C:\USERS\JEN AND KEITH\Cookies\1T3ZPFS0.txt [ Cookie:jen and keith@adform.net/ ]
C:\USERS\JEN AND KEITH\Cookies\BIUH42UU.txt [ Cookie:jen and keith@technoratimedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\MUZVEFDA.txt [ Cookie:jen and keith@adsonar.com/adserving ]
C:\USERS\JEN AND KEITH\Cookies\GREGKRDG.txt [ Cookie:jen and keith@click.livesearchnow.com/ads-clicktrack/click/ ]
C:\USERS\JEN AND KEITH\Cookies\XS46AORJ.txt [ Cookie:jen and keith@h2porn.com/videos/brunette-gays-suck-dicks-and-bleep-their-butts/ ]
C:\USERS\JEN AND KEITH\Cookies\1E63BPMH.txt [ Cookie:jen and keith@2o7.net/ ]
C:\USERS\JEN AND KEITH\Cookies\TB7LCJI8.txt [ Cookie:jen and keith@3271.765973.filter.trafficengine.com/ ]
C:\USERS\JEN AND KEITH\Cookies\8C36AI9I.txt [ Cookie:jen and keith@banners.adcontrol.com/ ]
C:\USERS\JEN AND KEITH\Cookies\6QCV9JTF.txt [ Cookie:jen and keith@rotator.adjuggler.com/ ]
C:\USERS\JEN AND KEITH\Cookies\GZQEUEJT.txt [ Cookie:jen and keith@adxpansion.com/ ]
C:\USERS\JEN AND KEITH\Cookies\P9CFSK7Y.txt [ Cookie:jen and keith@findology.com/ ]
C:\USERS\JEN AND KEITH\Cookies\41HXQC2L.txt [ Cookie:jen and keith@yieldmanager.net/ ]
C:\USERS\JEN AND KEITH\Cookies\DUK0TGGI.txt [ Cookie:jen and keith@ads.crakmedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\P65IP0ER.txt [ Cookie:jen and keith@lucidmedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\BL1CORI4.txt [ Cookie:jen and keith@www.porntube.com/xml/ ]
C:\USERS\JEN AND KEITH\Cookies\K2JE3KPW.txt [ Cookie:jen and keith@scarletseek.com/click/ ]
C:\USERS\JEN AND KEITH\Cookies\XE26OYAH.txt [ Cookie:jen and keith@media6degrees.com/ ]
C:\USERS\JEN AND KEITH\Cookies\WIAAAH72.txt [ Cookie:jen and keith@ads2.zeusclicks.com/ ]
C:\USERS\JEN AND KEITH\Cookies\2BHLQAD8.txt [ Cookie:jen and keith@h2porn.com/videos/martina-gedeck-the-elementary-particles/ ]
C:\USERS\JEN AND KEITH\Cookies\6NDNPVTZ.txt [ Cookie:jen and keith@insightexpressai.com/ ]
C:\USERS\JEN AND KEITH\Cookies\5PGJJCPL.txt [ Cookie:jen and keith@track.adform.net/ ]
C:\USERS\JEN AND KEITH\Cookies\ZM64UOHV.txt [ Cookie:jen and keith@bs.serving-sys.com/ ]
C:\USERS\JEN AND KEITH\Cookies\9GTW9OS3.txt [ Cookie:jen and keith@www.burstbeacon.com/ ]
C:\USERS\JEN AND KEITH\Cookies\WF1PV61R.txt [ Cookie:jen and keith@ees.rotator.hadj1.adjuggler.net/ ]
C:\USERS\JEN AND KEITH\Cookies\71576RLK.txt [ Cookie:jen and keith@www.porntube.com/videos/ ]
C:\USERS\JEN AND KEITH\Cookies\U7Y0U6YJ.txt [ Cookie:jen and keith@ad.mlnadvertising.com/ ]
C:\USERS\JEN AND KEITH\Cookies\IQE8D62B.txt [ Cookie:jen and keith@trafficengine.net/ ]
C:\USERS\JEN AND KEITH\Cookies\16U2MQFE.txt [ Cookie:jen and keith@mediaservices-d.openxenterprise.com/ ]
C:\USERS\JEN AND KEITH\Cookies\NPNG4733.txt [ Cookie:jen and keith@porntube.com/ ]
C:\USERS\JEN AND KEITH\Cookies\TREJA76O.txt [ Cookie:jen and keith@interclick.com/ ]
C:\USERS\JEN AND KEITH\Cookies\0WZJKBZ5.txt [ Cookie:jen and keith@78582.n23951.19477.yunofindit.com/ ]
C:\USERS\JEN AND KEITH\Cookies\TK7UQYXX.txt [ Cookie:jen and keith@adxpose.com/ ]
C:\USERS\JEN AND KEITH\Cookies\EU71VOGM.txt [ Cookie:jen and keith@www.porntube.com/beacon/ ]
C:\USERS\JEN AND KEITH\Cookies\9TAI5NPV.txt [ Cookie:jen and keith@adtechus.com/ ]
C:\USERS\JEN AND KEITH\Cookies\DKHFTIEV.txt [ Cookie:jen and keith@h2porn.com/ ]
C:\USERS\JEN AND KEITH\Cookies\4LB1JUNI.txt [ Cookie:jen and keith@filter.precisionmediappc.com/ ]
C:\USERS\JEN AND KEITH\Cookies\WOJH0M57.txt [ Cookie:jen and keith@collective-media.net/ ]
C:\USERS\JEN AND KEITH\Cookies\2IDD2JXT.txt [ Cookie:jen and keith@adtech.de/ ]
C:\USERS\JEN AND KEITH\Cookies\XBFRNJSC.txt [ Cookie:jen and keith@1sadx.net/ ]
C:\USERS\JEN AND KEITH\Cookies\395AB3A5.txt [ Cookie:jen and keith@steelhousemedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\HT973ZXG.txt [ Cookie:jen and keith@www.porntube.com/channels/ ]
C:\USERS\JEN AND KEITH\Cookies\8V18SGXN.txt [ Cookie:jen and keith@lfstmedia.com/ ]
C:\USERS\JEN AND KEITH\Cookies\IT23PR4R.txt [ Cookie:jen and keith@perfectsearchengines.com/click/ ]
C:\USERS\JEN AND KEITH\Cookies\29ATJI2I.txt [ Cookie:jen and keith@ru4.com/ ]
cdn.assets.youthologymedia.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
cdn.complexmedianetwork.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
cdn1.thumbnails.porntube.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
cdn2.baronsmedia.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
cdnx.tribalfusion.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
click.searchnation.net [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
convoad.technoratimedia.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
core.insightexpressai.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
core.saymedia.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
ds.serving-sys.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
elitetv.elitedaily.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
embed.porntube.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
h2porn.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
ia.media-imdb.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
img-cdn.mediaplex.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
media.mtvnservices.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
media.nbcmiami.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
media.outdoorchannel.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
media.scanscout.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
media1.break.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
media2.onsugar.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
msnbcmedia.msn.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
objects.tremormedia.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
richmedia247.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
s0.2mdn.net [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
secure-uk.imrworldwide.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
secure-us.imrworldwide.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
tag.2bluemedia.hiro.tv [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
video-vcdn.fastclick.net [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
webservices.evolvemediacorp.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
www.lracrisistracker.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
www.porntelecast.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
www.porntube.com [ C:\USERS\JEN AND KEITH\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9NDSXEBL ]
account.goodgamestudios.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
adserv6.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
art.aim4media.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
cdn.complexmedianetwork.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
cdn2.baronsmedia.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
click.searchnation.net [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
convoad.technoratimedia.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
core.insightexpressai.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
core.saymedia.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
crackle.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
ds.serving-sys.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
elitetv.elitedaily.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
img-cdn.mediaplex.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
kaltura.hutchmedia.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
media.mtvnservices.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
media.scanscout.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
media1.break.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
media3.onsugar.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
media5.break.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
mediabrix.hs.llnwd.net [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
msnbcmedia.msn.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
objects.tremormedia.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
secure-uk.imrworldwide.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
secure-us.imrworldwide.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
tag.2bluemedia.hiro.tv [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
video-vcdn.fastclick.net [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
video.adultswim.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
www.crackle.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]
www.entrepreneur.com [ C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\PCY8SQY5 ]

Trojan.Agent/Gen-Frauder
C:\USERS\JEN AND KEITH\APPDATA\LOCALLOW\SUN\JAVA\DEPLOYMENT\CACHE\6.0\27\4456791B-4107A6BB

Trojan.Agent/Gen-XPA
C:\USERS\JEN AND KEITH\APPDATA\LOCALLOW\SUN\JAVA\DEPLOYMENT\CACHE\6.0\45\4F367B2D-22C26DA2

PUP.CNETInstaller
C:\USERS\JEN AND KEITH\DOWNLOADS\CNET_WISEPCDOCTOR_SETUP_EXE.EXE

Trojan.Agent/Gen-Samdir
C:\WINDOWS\CHKNSETX.DLL
C:\WINDOWS\SYSWOW64\CHKNSETX.DLL

Trojan.Agent/Gen-Zusy
C:\WINDOWS\SYSWOW64\IASEX.DLL




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users